mitmproxy-mcp MCP Server
Servidor MCP mitmproxy-mcp
Un proyecto de servidor MCP
Componentes
Recursos
El servidor implementa un sistema de almacenamiento de notas simple con:
Nota personalizada: esquema URI para acceder a notas individuales
Cada recurso de nota tiene un nombre, una descripción y un tipo MIME de texto simple.
Indicaciones
El servidor proporciona un único mensaje:
resumir-notas: Crea resúmenes de todas las notas almacenadas
Argumento opcional "estilo" para controlar el nivel de detalle (breve/detallado)
Genera un mensaje que combina todas las notas actuales con la preferencia de estilo.
Herramientas
El servidor implementa una herramienta:
add-note: Agrega una nueva nota al servidor
Toma "nombre" y "contenido" como argumentos de cadena requeridos
Actualiza el estado del servidor y notifica a los clientes sobre los cambios de recursos.
Related MCP server: Datetime MCP Server
Configuración
[TODO: Agregar detalles de configuración específicos para su implementación]
Inicio rápido
Instalar
Escritorio de Claude
En MacOS: ~/Library/Application\ Support/Claude/claude_desktop_config.json En Windows: %APPDATA%/Claude/claude_desktop_config.json
Desarrollo
Construcción y publicación
Para preparar el paquete para su distribución:
Sincronizar dependencias y actualizar el archivo de bloqueo:
uv syncDistribuciones de paquetes de compilación:
uv buildEsto creará distribuciones de origen y de rueda en el directorio dist/ .
Publicar en PyPI:
uv publishNota: Deberás configurar las credenciales de PyPI a través de variables de entorno o indicadores de comando:
Token:
--tokenoUV_PUBLISH_TOKENO nombre de usuario/contraseña:
--username/UV_PUBLISH_USERNAMEy--password/UV_PUBLISH_PASSWORD
Depuración
Dado que los servidores MCP se ejecutan en stdio, la depuración puede ser complicada. Para una experiencia óptima, recomendamos usar el Inspector MCP .
Puede iniciar el Inspector MCP a través de npm con este comando:
npx @modelcontextprotocol/inspector uv --directory /Users/lucas/Coding/mitmproxy-mcp run mitmproxy-mcpAl iniciarse, el Inspector mostrará una URL a la que podrá acceder en su navegador para comenzar a depurar.
Available Tools
4 toolsanalyze_protectionC
Analyze flow for bot protection mechanisms and extract challenge details
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | The ID of the session | |
| flow_index | Yes | The index of the flow to analyze | |
| extract_scripts | No | Whether to extract and analyze JavaScript from the response (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions analyzing and extracting details, but fails to describe key traits such as whether this is a read-only operation, potential side effects, performance considerations (e.g., time-intensive due to script extraction), or error handling. This leaves significant gaps in understanding how the tool behaves.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core purpose without unnecessary words. Every part earns its place by clearly stating the action and target, making it easy to parse and understand quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of analyzing bot protection mechanisms and the lack of annotations and output schema, the description is incomplete. It doesn't explain what 'challenge details' include, how results are returned, or any limitations (e.g., only works with certain flow types). For a tool with no structured behavioral or output information, more context is needed to be fully helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema fully documents all three parameters. The description adds no additional meaning beyond what's in the schema (e.g., it doesn't explain how 'session_id' or 'flow_index' relate to protection analysis). With high schema coverage, the baseline score of 3 is appropriate as the description doesn't compensate but also doesn't detract.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with specific verbs ('analyze', 'extract') and resources ('flow', 'bot protection mechanisms', 'challenge details'), making it easy to understand what the tool does. However, it doesn't explicitly differentiate from sibling tools like 'get_flow_details' or 'list_flows', which might also analyze or extract information from flows.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'get_flow_details' or 'extract_json_fields'. It lacks context on prerequisites (e.g., needing a session or flow index), exclusions, or specific scenarios where this tool is preferred, leaving usage decisions ambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
extract_json_fieldsC
Extract specific fields from JSON content in a flow using JSONPath expressions
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | The ID of the session | |
| flow_index | Yes | The index of the flow | |
| content_type | Yes | Whether to extract from request or response content | |
| json_paths | Yes | JSONPath expressions to extract (e.g. ['$.data.users', '$.metadata.timestamp']) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the tool extracts fields but doesn't describe what happens if JSON content is missing, invalid, or if JSONPath expressions fail. It lacks details on permissions, rate limits, or output format, leaving key behavioral traits unspecified for a tool that manipulates data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core purpose ('extract specific fields from JSON content in a flow') and method ('using JSONPath expressions'). There is no wasted text, and it directly communicates the tool's function without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of a 4-parameter tool with no annotations and no output schema, the description is incomplete. It doesn't explain the return values, error handling, or behavioral nuances like what happens with invalid inputs. For a tool that processes JSON data, more context on output format and limitations is needed to be fully helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all four parameters. The description adds minimal value beyond the schema by mentioning 'JSON content in a flow' and 'JSONPath expressions', which align with parameters like 'content_type' and 'json_paths'. However, it doesn't provide additional syntax, examples, or constraints beyond what's in the schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('extract specific fields') and resource ('JSON content in a flow'), specifying the method ('using JSONPath expressions'). It distinguishes from sibling tools like 'get_flow_details' or 'list_flows' by focusing on field extraction rather than retrieval or analysis. However, it doesn't explicitly contrast with 'analyze_protection', which might involve similar data handling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention prerequisites (e.g., needing a valid session or flow), exclusions, or compare to siblings like 'analyze_protection' for JSON analysis. Usage is implied only by the action, with no explicit context for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_flow_detailsC
Lists HTTP requests/responses from a mitmproxy capture session, showing method, URL, and status codes
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | The ID of the session | |
| flow_indexes | Yes | The indexes of the flows | |
| include_content | No | Whether to include full content in the response (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It describes the tool as listing data, implying a read-only operation, but doesn't cover critical aspects like whether it's safe (e.g., no side effects), performance characteristics (e.g., handling of large datasets), or error conditions. For a tool with no annotation coverage, this is a significant gap in transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that directly states the tool's purpose without unnecessary details. It is front-loaded and wastes no words, making it easy for an agent to parse quickly and understand the core functionality.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of handling HTTP flows and the lack of annotations and output schema, the description is incomplete. It doesn't explain the return format (e.g., structure of listed data), potential limitations (e.g., pagination or size constraints), or how parameters like 'include_content' affect behavior. For a tool with 3 parameters and no structured output, more context is needed for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, clearly documenting all parameters. The description adds no additional meaning beyond the schema, such as explaining parameter interactions or usage nuances. With high schema coverage, the baseline score is 3, as the description doesn't compensate but also doesn't detract from the schema's information.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Lists HTTP requests/responses from a mitmproxy capture session, showing method, URL, and status codes.' It specifies the verb ('Lists'), resource ('HTTP requests/responses'), and scope ('from a mitmproxy capture session'), making the function evident. However, it doesn't explicitly differentiate from sibling tools like 'list_flows', which might have overlapping functionality, preventing a perfect score.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention sibling tools like 'list_flows' or specify contexts, prerequisites, or exclusions for usage. This lack of comparative or contextual advice leaves the agent without clear direction for tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_flowsC
Retrieves detailed HTTP request/response data including headers, content (or structure preview for large JSON), and metadata from specified flows
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | The ID of the session to list flows from |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It mentions retrieving 'detailed HTTP request/response data' including headers, content, and metadata, but lacks critical behavioral details such as whether this is a read-only operation, potential rate limits, error handling, or how large JSON is handled ('structure preview'). This leaves significant gaps for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the key action ('Retrieves detailed HTTP request/response data'). It could be slightly more structured by separating scope details, but it avoids unnecessary fluff and earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations and output schema, the description is incomplete. It hints at behavioral aspects like handling 'large JSON' but doesn't fully explain return values, error cases, or operational constraints. For a tool with no structured support, more detail is needed to guide an agent effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents the single parameter 'session_id' adequately. The description adds no additional meaning or context about the parameter beyond what the schema provides, such as format examples or how to obtain a session_id. Baseline 3 is appropriate when schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Retrieves') and resource ('detailed HTTP request/response data from specified flows'), making the purpose understandable. However, it doesn't explicitly differentiate from sibling tools like 'get_flow_details' or 'analyze_protection', which might have overlapping functionality.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like 'get_flow_details' or 'analyze_protection'. The description mentions retrieving data from 'specified flows' but doesn't clarify prerequisites, such as needing a valid session_id or how this differs from other flow-related tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
- First observed
analyze_protection - First observed
extract_json_fields - First observed
get_flow_details - First observed
list_flows
TDQS
Scored across 4 tools
The tools have some overlap that could cause confusion. 'get_flow_details' and 'list_flows' both retrieve HTTP flow data, with 'get_flow_details' focusing on method/URL/status and 'list_flows' providing headers/content/metadata—these boundaries are unclear and might lead to misselection. However, 'analyze_protection' and 'extract_json_fields' are clearly distinct, targeting bot protection analysis and JSON field extraction respectively.
The naming is mostly consistent with a verb_noun pattern, using snake_case throughout. 'analyze_protection', 'extract_json_fields', and 'list_flows' follow this well, but 'get_flow_details' deviates slightly by using 'get' instead of a more descriptive verb like 'show' or 'retrieve', which is a minor inconsistency in an otherwise predictable set.
With 4 tools, the count is well-scoped for a mitmproxy server focused on HTTP flow analysis. Each tool appears to serve a distinct purpose within this domain, such as listing flows, analyzing protections, and extracting data, making the set neither too sparse nor overloaded for the intended functionality.
The tool surface has notable gaps for a mitmproxy domain. It covers flow retrieval, protection analysis, and JSON extraction, but lacks operations for modifying or intercepting flows (e.g., add, edit, block), which are core to proxy functionality. Agents can work around this by using existing tools for analysis, but the absence of manipulation tools limits completeness.
Maintenance
Related MCP Connectors
An MCP server that used to create notes
Google Keep-style notes app with an MCP server for AI agents to read/write notes.
Markdown-based note-taking with a hosted MCP server. Your notes serve you and your AI.
- SumibakoOAuthcom.sumibako
Write pages into your notes vault, search them, and publish one as a shareable link.
Related MCP Servers
- FlicenseCqualityDmaintenanceThis server provides a note storage system with a custom URI scheme, allowing users to add and summarize notes, with adjustable summary detail levels.1-
- FlicenseCqualityDmaintenanceThis server enables users to store, manage, and summarize notes using a custom URI scheme, with functionality to add new notes and generate summaries with varying levels of detail.3-
- AlicenseCqualityDmaintenanceA server for connecting to a local ComfyUI instance that enables storing and summarizing notes with custom URI scheme support.14MIT
- FlicenseNot gradedqualityDmaintenanceA simple note-taking MCP server that allows storing and summarizing notes with custom URI schemes and provides functionality to add notes and generate summaries with different detail levels.5-